1029561 - Update Mozilla 32 to use NSS 3.16.3 after July 1st to include root CA updates

Status: RESOLVED FIXED

(Core :: Security: PSM, defect)

Description

[Kai Engert [:KaiE:]]

On July 1st, or within a few days afterwards, we intend to release NSS 3.16.3

NSS versions 3.16.2 and 3.16.3 will differ in the root CA list, only.
The set of changes has already been tested and reviewed in bug 1021967.

Kathleen would like to see this change included in Firefox 32.

Comment 1

[Kai Engert [:KaiE:]]

Attachment: upgrade-to-nss-3.16.3-placeholder.txt

Bob, can you please mark r+ to confirm the actions in the placeholder are OK?

Comment 2

[Robert Relyea]

Comment on attachment 8445229 [details]
upgrade-to-nss-3.16.3-placeholder.txt

r+ I agree with this plan.

bob

Comment 3

[Kai Engert [:KaiE:]]

Comment on attachment 8445229 [details]
upgrade-to-nss-3.16.3-placeholder.txt

Requesting Aurora 32 approval, as explained in this bug.

To be landed shortly after July 1st.

Comment 4

[Lawrence Mandel [:lmandel] (use needinfo)]

Comment on attachment 8445229 [details]
upgrade-to-nss-3.16.3-placeholder.txt

Aurora approval granted.

Kai - Can you please handle the uplift when you're ready?

Ryan - Unless you hear otherwise, let's leave this uplift to Kai so that he can do it on the appropriate schedule.

Comment 5

[Kai Engert [:KaiE:]]

(In reply to Lawrence Mandel [:lmandel] from comment #4)
> Aurora approval granted.
> Kai - Can you please handle the uplift when you're ready?

Thanks the approval. Yes, I'll handle it (today).

Comment 6

[Kai Engert [:KaiE:]]

https://hg.mozilla.org/integration/mozilla-inbound/rev/4221d7bca996

Comment 7

[Kai Engert [:KaiE:]]

inbound testing succeeded.

Pushed to aurora.
https://hg.mozilla.org/releases/mozilla-aurora/rev/e823f4404497

Comment 8

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/mozilla-central/rev/4221d7bca996

Comment 9

[Kai Engert [:KaiE:]]

Sylvestre, if you intend to work on release notes, please note that this was followed up by bug 1048876 with NSS 3.16.4

Comment 10

[Sylvestre Ledru [:Sylvestre]]

OK. Thanks. Updating this other bug then.